Advertisement

03.31.2008 at 10:28PM PDT, ID: 23284856
[x]
Attachment Details

Windows XP: Muliple Files Deleting themselves, starting with shortcuts and favourites, then data files

Asked by BakasIT in Windows XP Operating System

Tags: Microsoft, XP Pro, SP2, files delete themselves

Hi Experts,
I've got a client who generally works in the field with a laptop and a wireless internet account, today he is in the office for the first time in a month. He has connected his laptop to the domain and logged in normally. I checked that he is indeed logged in under his profile and NOT a temp profile.

He first noticed that many of his desktop files has disappeared as soon as he logged on, then when he went to his favourites, they were all missing also.

As i thought it was initially a profile issue (ie. logged onto a temp account or something simialr) i didn't check on his actualy data files (ie. .xls, .doc etc). When i did ask him to check these, he found that some were missing and some were there in a somewhat random order. He had not used these files today or looked at his own documents so, i don't believe he is deleting them accidently.

He has since emailed me to tell me that:
 "As I go through my files I find more and more of my material missing. It is as though the computer has self executed an archiving process and dropped all the material raised before a certain point in time"

I have told him to update eTrust and run a scan. His laptop is slow, so it hasn't finished at time of writing. I can't think of anything other than MAYBE a disk cleanup compressing old files into another location.

The laptop is on domain as mentioned with a newly installed (as of a fortnight ago) Win2k3 SBS server, which had been swing migrated, therefore it is affectively the same server.

I can't think of any other pertanent information at this point.

Has anyone witnessed these symptons before?

cheers,
HenryStart Free Trial
[+][-]03.31.2008 at 10:35PM PDT, ID: 21251425

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.31.2008 at 10:50PM PDT, ID: 21251467

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zone: Windows XP Operating System
Tags: Microsoft, XP Pro, SP2, files delete themselves
Sign Up Now!
Solution Provided By: polazarus
Participating Experts: 3
Solution Grade: B
 
 
[+][-]03.31.2008 at 11:15PM PDT, ID: 21251587

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]04.01.2008 at 12:18AM PDT, ID: 21251829

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]04.01.2008 at 03:07AM PDT, ID: 21252511

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
 
Loading Advertisement...
Microsoft
  • Internet Protocols
  • Applications
  • Development
  • OS
  • Hardware
  • Windows Security
Apple
  • Operating Systems
  • Hardware
  • Programming
  • Networking
  • Software
Internet
  • Search Engines
  • File Sharing
  • WebTrends / Stats
  • Spy / Ad Blockers
  • Web Browsers
  • New Net Users
  • Web Development
  • Chat / IM
  • Anti Spam
  • Web Servers
  • Anti-Virus
  • Email Clients
Gamers
  • Tips
  • Online / MMORPG
  • Puzzle
  • Emulators
  • Action / Adventure
  • Role Playing
  • Consoles
  • Game Programming
  • Strategy
  • Sports
  • Misc
  • Computer Games
Digital Living
  • Hardware
  • Automotive
  • New Net Users
  • New Users
  • Software
  • Digital Music
  • Gaming World
  • Home Security
  • Apple
  • Networking Hardware
Virus & Spyware
  • Vulnerabilities
  • IDS
  • Encryption
  • Anti-Virus
  • Operating Systems Security
  • Software Firewalls
  • WebApplications
  • Cell Phones
  • Operating Systems
  • Internet
  • Hardware Firewalls
Hardware
  • Displays / Monitors
  • Handhelds / PDAs
  • Components
  • Peripherals
  • Laptops/Notebooks
  • Servers
  • Misc
  • Apple
  • Embedded Hardware
  • Networking Hardware
  • Storage
  • Desktops
  • New Users
Software
  • System Utilities
  • Industry Specific
  • Network Management
  • Photos / Graphics
  • Page Layout
  • VMware
  • Misc
  • Web Development
  • OS
  • CYGWIN
  • Voice Recognition
  • Virtualization
  • Message Queue
  • Quality Assurance
  • Security
  • Firewalls
  • MultiMedia Applications
  • Development
  • Database
  • Office / Productivity
  • Business Management
  • OS/2 Apps
  • Server Software
  • Internet / Email
ITPro
  • OS
  • Storage
  • Encryption
  • Operating Systems Security
  • Apple Hardware
  • Laptops & Notebooks
  • Servers
  • Networking Hardware
  • Peripherals
  • Devices
  • Displays / Monitors
  • WebTrends / Stats
  • Search Engines
  • Firewalls
  • Web Computing
  • WebApplications
  • IDS
  • Vulnerabilities
  • Email Clients
  • File Sharing
  • Spy / Ad Blockers
  • Web Browsers
  • Web Servers
  • Networking
  • Anti-Virus
  • Consulting
  • Chat / IM
  • Anti Spam
Developer
  • Web Servers
  • Web Browsers
  • Game Programming
  • Dev Tools
  • Industry Specific
  • Office / Productivity
  • Database
  • CYGWIN
  • Web Development
  • Search Engines
  • File Sharing
  • WebTrends / Stats
  • Programming
  • Content Management
  • Application Servers
  • Protocols
Storage
  • Removable Backup Media
  • Storage Technology
  • Servers
  • Grid
  • Remote Access
  • Backup / Restore
  • Misc
  • Hard Drives
OS
  • Miscellaneous
  • Security
  • Development
  • Linux
  • VMware
  • MainFrame OS
  • Unix
  • Apple
  • OS / 2
  • AS / 400
  • BeOS
  • Microsoft
  • VMS / OpenVMS
Database
  • Oracle
  • Miscellaneous
  • MySQL
  • Software
  • Sybase
  • Contact Management
  • PostgreSQL
  • Data Manipulation
  • Clarion
  • InterSystems Cache
  • Siebel
  • MUMPS
  • OLAP
  • SQLBase
  • SAS
  • GIS & GPS
  • 4GL
  • Berkeley DB
  • DB2
  • Informix
  • Interbase / Firebird
  • FoxPro
  • Reporting
  • LDAP
  • Filemaker Pro
  • MS SQL Server
  • dBase
  • MS Access
Security
  • Misc
  • Web Browsers
  • Software Firewalls
  • Operating Systems Security
  • File Sharing
  • Spy / Ad Blockers
  • Vulnerabilities
  • WebApplications
  • IDS
  • Anti-Virus
  • Encryption
  • Anti Spam
  • Email Clients
  • VPN
  • Chat / IM
Programming
  • Editors IDEs
  • Installation
  • Handhelds / PDAs
  • Multimedia Programming
  • System / Kernel
  • Automation
  • Algorithms
  • Game
  • Signal Processing
  • Project Management
  • Open Source
  • Database
  • Misc
  • Languages
  • Processor Platforms
  • Theory
Web Development
  • Scripting
  • Blogs
  • Web Servers
  • Software
  • Search Engines
  • Web Graphics
  • Web Services
  • Images
  • Internet Marketing
  • Images and Photos
  • Components
  • Document Imaging
  • Web Languages/Standards
  • Illustration
  • WebApplications
  • Fonts
  • WebTrends / Stats
  • Authoring
  • Digital Camera Software
  • Miscellaneous
Networking
  • Protocols
  • Apple Networking
  • Network Management
  • Message Queue
  • Application Servers
  • Content Management
  • File Servers
  • Email Servers
  • Misc
  • Java Editors & IDEs
  • Wireless
  • Networking Hardware
  • Backup / Restore
  • System Utilities
  • ISPs & Hosting
  • Web Servers
  • Storage Technology
  • Removable Backup Media
  • Servers
  • Web Computing
  • Broadband
  • Grid
  • OS / 2
  • Novell Netware
  • Unix Networking
  • Windows Networking
  • Security
  • Telecommunications
  • Operating Systems
  • Linux Networking
Other
  • Lounge
  • Business Travel
  • Community Support
  • New Net Users
  • Philosophy / Religion
  • Math / Science
  • Miscellaneous
  • URLs
  • Expert Lounge
  • Politics
  • Puzzles / Riddles
  • Automotive
Community Support
  • Suggestions
  • New to EE
  • New Topics
  • CleanUp
  • Announcements
  • General
  • Feedback
  • Input
  • EE Bugs
 
03.31.2008 at 10:35PM PDT, ID: 21251425
You my friend have a virus... Everything you are explaining is a virus
 
03.31.2008 at 10:50PM PDT, ID: 21251467
The best thing to do if you have access to the computer is run norton with autoprotect enabled then run the Winternals RootKit analyzer.  What I have done with this is have the Rootkit analyzer scan the files and if there is a virus in those files the Norton will catch it.  In any case I would unplug it from the network to keep it from spreading.  I have seen a virus take down a 5000 plus node network.  It is running slow probably do to its generating traffic and trying to propogate itself.  

In anycase this could be pretty serious.
Accepted Solution
 
03.31.2008 at 11:15PM PDT, ID: 21251587
it doesnt sound like a virus at all to me it sounds like the domain just involked the profile that it had saved for the user on the computer once he returned to the network.  When you say wireless account is he using vpn to connect to the network remotly?  As I am sure that his wireless doesnt get a direct link on the at all times if not he was using a local profile to save all his data and then upon return to the network it issued the profile for him that is saved on the network hence not containing all his work that he has done since he left the network and came back.
 
04.01.2008 at 12:18AM PDT, ID: 21251829
He has been using a VPN but i can find no evidence of it in the network connections pannel. Another missing file...

I have always been under the impression that even if you use a laptop d/c from the domain controller, it will log you onto an emulated domain, save your files locally then shunt them accross next time you are connected to the network?

the wireless i speak of is mobile broadband. VPN obviously connects after that.

cheers,
Henry
 
04.01.2008 at 03:07AM PDT, ID: 21252511
Interesting... I'd have to agree with Venom though, it doesn't sound like a virus to me... Have you been able to check some of the dates on the remaining files etc, to see if they all correlate to having all been there before/after a specific date? If it all seems to link to the previous time he was in the office, it would as Venom said point towards a weird profile problem.

What you're referring to when you speak about 'shunting them across' is offline files and My Docs redirection etc. - Normally, when logging onto a domain account (whether you're actually connected to the network or not) the common save locations like My Docs etc, all reside locally, and never get copied anywhere else unless manually carried out.

However, if you have folder redirection and offline files enabled, then things get moved around when logging off and on etc...

So, do you have any folder redirection etc?
 
 
20080716-EE-VQP-32 / EE_QW_2_20070628